2 changes to exploits/shellcodes Webmin 1.973 - Cross-Site Request Forgery (CSRF) WordPress Plugin Current Book 1.0.1 - 'Book Title and Author field' Stored Cross-Site Scripting (XSS)